Log4j updated t version 2.17.2
Version history
3.6.7Bamboo Server 5.0 - 9.2.52022-04-05Log4j updated t version 2.17.2 Version 3.6.7 • Released 2022-04-05 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-Source3.6.6Bamboo Server 5.0 - 8.1.122021-12-21Fixed Log4J version for security fix Version 3.6.6 • Released 2021-12-21 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceUpdated log4j version to 2.17.0
Log4J Vulnerability Description
org.apache.logging.log4j:log4j-core is a logging library for Java.Affected versions of this package are vulnerable to Arbitrary Code Execution. Apache Log4j2 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled.
From log4j 2.15.0, this behavior has been disabled by default.
3.6.5Bamboo Server 5.0 - 8.0.132019-04-07Minor changes Version 3.6.5 • Released 2019-04-07 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceMinor changes
3.6.4Bamboo Server 5.1.0 - 7.2.102019-03-19Handles XSRF issues Version 3.6.4 • Released 2019-03-19 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceHandles XSRF issues
3.6.3Bamboo Server 5.1.0 - 6.8.32019-03-02Updated project and environment selection to support huge lists Version 3.6.3 • Released 2019-03-02 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceUpdated project and environment selection to support huge lists
3.6.2Bamboo Server 5.7.0 - 6.8.32018-10-28Plant select lists updated Version 3.6.2 • Released 2018-10-28 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceChanged select lists for plans to show large set of plans in scrollable list
3.6Bamboo Server 5.7.0 - 6.6.32017-11-11Added option to create release without deployment Version 3.6 • Released 2017-11-11 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceAdded option to create new release without deploying to any environment
3.5Bamboo Server 5.7.0 - 6.2.92016-11-27Option to fail the build or deployment based on triggered build Version 3.5 • Released 2016-11-27 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceAdded option to configure the current build or deployment plan based on triggered build for:
Build Task
Integration Tests Task
The create, rollback, promote and rerun deployments will mark current plan as pass or fail based on result.
3.4Bamboo Server 5.7.0 - 5.13.22016-10-05Added deployment tasks to deployment plans Version 3.4 • Released 2016-10-05 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceAdded tasks to deployment plans:
-Create new release
-Rerun release
-Promote release
-Rollback release
3.3Bamboo Server 5.7.0 - 5.13.22016-09-25Enhanced Task UI Version 3.3 • Released 2016-09-25 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceEnhanced Task UI
3.2Bamboo Server 5.7.0 - 5.13.02016-09-25Bug Fixes Version 3.2 • Released 2016-09-25 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceEnhanced Task UI
3.1Bamboo Server 5.7.0 - 5.13.02016-09-21Bug Fixes Version 3.1 • Released 2016-09-21 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceProvides fix for No class def found error.
3.0Bamboo Server 5.7.0 - 5.13.02016-09-21Bug Fixes Version 3.0 • Released 2016-09-21 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceFixed issue : Not adding task to plan in few Bamboo versions
2.0Bamboo Server 5.7.0 - 5.13.02016-08-25Enhanced plan tasks Version 2.0 • Released 2016-08-25 • Supported By AutoTestingTools • Paid via Atlassian • Atlassian Closed-SourceEnhanced plan tasks with REST API.